Merge "Clarify sysfs_leds neverallow."

am: e58fa548

Change-Id: I2d9d8da45c721077c86a21e41d3514da8db60420

private/coredomain.te

@@ -4,14 +4,13 @@ get_prop(coredomain, exported_pm_prop)
 full_treble_only(`
 neverallow {
     coredomain
+
+    # for chowning
     -init
-    -vendor_init
 
     # generic access to sysfs_type
     -ueventd
+    -vendor_init
     -vold
-    -priv_app
-    -storaged
-    -system_app
 } sysfs_leds:file *;
 ')